7.2.1 Enabling SSL between Browsers and Access Gateway

This section explains how to enable SSL communication between Access Gateway and browsers (channel 4 in Figure 7-1).

  1. Click Devices > Access Gateways > Edit > [Name of Reverse Proxy].

  2. Select the following options based on your requirement:

    • Enable SSL with Embedded Service Provider

    • Enable SSL between Browser and Access Gateway

    • Redirect Requests from Non-Secure Port to Secure Port

  3. Select the certificate to use for SSL between Access Gateway and browsers.

  4. Configure the ports for SSL:

    Non-Secure Port: Indicates a specific port to listen to HTTP requests. The default port for HTTP is 80.

    • If you selected the Redirect Requests from Non-Secure Port to Secure Port option, requests sent to this port are redirected to the secure port. If the browser can establish an SSL connection, the session continues on the secure port. If the browser cannot establish an SSL connection, the session is terminated.

    • If you do not select the Redirect Requests from Non-Secure Port to Secure Port option, this port is not used when SSL is enabled.

    Secure Port: Indicates a specific port to listen to HTTPS requests (usually 443). This port needs to match the configuration for SSL. If SSL is enabled, this port is used for all communication with the browsers. The listening address and port combination must not match any combination you have configured for another reverse proxy or tunnel.

  5. Click OK > Reverse Proxy / Authentication.